Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Clawdbot Filesystem.Bak

Advanced filesystem operations - listing, searching, batch processing, and directory analysis for Clawdbot

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 197 · 1 current installs · 1 all-time installs
fork of @gtrusler/clawdbot-filesystem (based on 1.0.2)
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description and declared dependency on node are appropriate for a filesystem CLI. However, the package metadata (package.json) advertises a CLI binary at ./filesystem and read-write filesystem permissions, but the manifest does not include an actual executable named 'filesystem'. That mismatch indicates the bundle is incomplete or mispackaged.
Instruction Scope
SKILL.md instructs the agent to run a local 'filesystem' CLI and gives many example commands that would access arbitrary directories (including /var/log). It also suggests cloning a GitHub repo, running npm install -g ., or installing an MCP server via npx. The instructions do not request unrelated env vars or secrets, but they do permit broad filesystem operations and recommend network installs (git/npx) despite package.json claiming no network — an inconsistency. The instructions are otherwise focused on filesystem tasks and include safety notes (protected paths, dry-run).
!
Install Mechanism
The skill is instruction-only (no install section) but its README/SKILL.md recommend git clone and npm install -g or using ClawdHub. The manifest contains package.json/package-lock but the actual CLI file referenced by the package (./filesystem) is missing from the provided file list, so following the install steps will likely fail or result in fetching remote code. The MCP-install suggestion uses npx to pull @modelcontextprotocol/server-filesystem from the registry, which will download and execute remote code — legitimate for the MCP server but increases risk and should be explicitly acknowledged.
Credentials
The skill declares no required environment variables or primary credential. package.json claims 'network': 'none' in clawdbot.permissions, but SKILL.md suggests git clone and npx usage which require network access — a contradiction. No secrets are requested; filesystem read-write permission is expected for this type of tool but grants broad local access if enabled.
Persistence & Privilege
always:false (no forced inclusion) and model invocation is allowed (default). The skill does not request exceptional platform privileges or claim to modify other skills' configurations. It does indicate read-write filesystem permission (expected for this tool) — exercising that permission should be limited to explicitly allowed directories.
What to consider before installing
What to check before installing: - Confirm the package includes the actual CLI binary: the manifest references a './filesystem' executable but that file is not present in the provided manifest. Installing as-is may fail or cause the installer to fetch code from the network. - The README/SKILL.md recommends git clone and npm install or using npx to fetch an MCP server. Those steps download and run remote code; only proceed if you trust the remote repositories and have reviewed their source. - The skill requests read-write filesystem capability (expected), which can access user files. Ensure you only allow it access to limited, non-sensitive directories (use MCP or explicit allowed paths) and enable dry-run/confirm prompts before any destructive operations. - Verify the network/no-network contradiction: package.json claims no network but instructions require network. Clarify this with the publisher or inspect the remote repo before running installs that use git/npx. - If you plan to use the MCP server option, review the @modelcontextprotocol/server-filesystem package and its configuration; ensure allowed directories do not include system or credential storage paths (e.g., /, /etc, home dirs with secrets). - Because the bundle appears incomplete/mispackaged, prefer installing from the upstream repository on GitHub and auditing the 'filesystem' executable script before giving it permissions or running it.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk970p2r1yp2b1y7nxs1pw0hyen829qf1

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📁 Clawdis
Binsnode

SKILL.md

📁 Filesystem Management

Advanced filesystem operations for AI agents. Comprehensive file and directory operations with intelligent filtering, searching, and batch processing capabilities.

Features

📋 Smart File Listing

  • Advanced Filtering - Filter by file types, patterns, size, and date
  • Recursive Traversal - Deep directory scanning with depth control
  • Rich Formatting - Table, tree, and JSON output formats
  • Sort Options - By name, size, date, or type

🔍 Powerful Search

  • Pattern Matching - Glob patterns and regex support
  • Content Search - Full-text search within files
  • Multi-criteria - Combine filename and content searches
  • Context Display - Show matching lines with context

🔄 Batch Operations

  • Safe Copying - Pattern-based file copying with validation
  • Dry Run Mode - Preview operations before execution
  • Progress Tracking - Real-time operation progress
  • Error Handling - Graceful failure recovery

🌳 Directory Analysis

  • Tree Visualization - ASCII tree structure display
  • Statistics - File counts, size distribution, type analysis
  • Space Analysis - Identify large files and directories
  • Performance Metrics - Operation timing and optimization

Quick Start

# List files with filtering
filesystem list --path ./src --recursive --filter "*.js"

# Search for content
filesystem search --pattern "TODO" --path ./src --content

# Batch copy with safety
filesystem copy --pattern "*.log" --to ./backup/ --dry-run

# Show directory tree
filesystem tree --path ./ --depth 3

# Analyze directory structure
filesystem analyze --path ./logs --stats

Command Reference

filesystem list

Advanced file and directory listing with filtering options.

Options:

  • --path, -p <dir> - Target directory (default: current)
  • --recursive, -r - Include subdirectories
  • --filter, -f <pattern> - Filter files by pattern
  • --details, -d - Show detailed information
  • --sort, -s <field> - Sort by name|size|date
  • --format <type> - Output format: table|json|list

filesystem search

Search files by name patterns or content.

Options:

  • --pattern <pattern> - Search pattern (glob or regex)
  • --path, -p <dir> - Search directory
  • --content, -c - Search file contents
  • --context <lines> - Show context lines
  • --include <pattern> - Include file patterns
  • --exclude <pattern> - Exclude file patterns

filesystem copy

Batch copy files with pattern matching and safety checks.

Options:

  • --pattern <glob> - Source file pattern
  • --to <dir> - Destination directory
  • --dry-run - Preview without executing
  • --overwrite - Allow file overwrites
  • --preserve - Preserve timestamps and permissions

filesystem tree

Display directory structure as a tree.

Options:

  • --path, -p <dir> - Root directory
  • --depth, -d <num> - Maximum depth
  • --dirs-only - Show directories only
  • --size - Include file sizes
  • --no-color - Disable colored output

filesystem analyze

Analyze directory structure and generate statistics.

Options:

  • --path, -p <dir> - Target directory
  • --stats - Show detailed statistics
  • --types - Analyze file types
  • --sizes - Show size distribution
  • --largest <num> - Show N largest files

Installation

# Clone or install the skill
cd ~/.clawdbot/skills
git clone <filesystem-skill-repo>

# Or install via ClawdHub
clawdhub install filesystem

# Make executable
chmod +x filesystem/filesystem

Configuration

Customize behavior via config.json:

{
  "defaultPath": "./",
  "maxDepth": 10,
  "defaultFilters": ["*"],
  "excludePatterns": ["node_modules", ".git", ".DS_Store"],
  "outputFormat": "table",
  "dateFormat": "YYYY-MM-DD HH:mm:ss",
  "sizeFormat": "human",
  "colorOutput": true
}

Examples

Development Workflow

# Find all JavaScript files in src
filesystem list --path ./src --recursive --filter "*.js" --details

# Search for TODO comments
filesystem search --pattern "TODO|FIXME" --path ./src --content --context 2

# Copy all logs to backup
filesystem copy --pattern "*.log" --to ./backup/logs/ --preserve

# Analyze project structure
filesystem tree --path ./ --depth 2 --size

System Administration

# Find large files
filesystem analyze --path /var/log --sizes --largest 10

# List recent files
filesystem list --path /tmp --sort date --details

# Clean old temp files
filesystem list --path /tmp --filter "*.tmp" --older-than 7d

Safety Features

  • Path Validation - Prevents directory traversal attacks
  • Permission Checks - Verifies read/write access before operations
  • Dry Run Mode - Preview destructive operations
  • Backup Prompts - Suggests backups before overwrites
  • Error Recovery - Graceful handling of permission errors

Integration

Works seamlessly with other Clawdbot tools:

  • Security Skill - Validates all filesystem operations
  • Git Operations - Respects .gitignore patterns
  • Backup Tools - Integrates with backup workflows
  • Log Analysis - Perfect for log file management

Updates & Community

Stay informed about the latest Clawdbot skills and filesystem tools:

  • 🐦 Follow @LexpertAI on X for skill updates and releases
  • 🛠️ New filesystem features and enhancements
  • 📋 Best practices for file management automation
  • 💡 Tips and tricks for productivity workflows

Get early access to new skills and improvements by following @LexpertAI for:

  • Skill announcements and new releases
  • Performance optimizations and feature updates
  • Integration examples and workflow automation
  • Community discussions on productivity tools

License

MIT License - Free for personal and commercial use.


Remember: Great filesystem management starts with the right tools. This skill provides comprehensive operations while maintaining safety and performance.

Files

11 total
Select a file
Select a file to preview.

Comments

Loading comments…